AAA Source Interface

[Patrick McHenry]

Hi,

is there a way to make aaa authentication requests source from a specific interface on a device? On remote DMVPN devices there are two tunnel interfaces and one VLAN 10 interface. The DMVPN device seems to send requests from one tunnel address or the other so, to get around this I have entered both tunnel IP scopes in the ACS server. This solves the problem but, if I could send aaa requests out the VLAN 10 interface - then, I would only have to enter one scope in the ACS server.

Thanks, Pat.

[cadet alain]

Hi,

yes you have the tacacs-server source-interface and radius-server source-interface commands.

Regards.

Alain

Don't forget to rate helpful posts.

[Patrick McHenry]

Alain,

it appears my router doesn't have that command.

Router(config)#tacacs-server ?

  administration    Start tacacs+ deamon handling administrative messages

  attribute         Customize selected tacacs attributes

  cache             AAA auth cache default server group

  directed-request  Allow user to specify tacacs server to use with

`@server'

  dns-alias-lookup  Enable IP Domain Name System Alias lookup for TACACS

                    servers

  domain-stripping  Strip the domain from the username

  host              Specify a TACACS server

  key               Set TACACS+ encryption key.

  packet            Modify TACACS+ packet options

  timeout           Time to wait for a TACACS server to reply

[cadet alain]

Hi Patrick,

I don't know how my mind created this unknown command and really sorry having given you an incorrect reply that you rated.Of course the correct command was given by John.

Regards.

Alain

Don't forget to rate helpful posts.

[Patrick McHenry]

No sweat - I'm pretty liberal with my rates.

I'm just happy when someone gives me a response - I'll take any help I can get.

Thanks,  Alain. Can't rate that one though : )

[John Blakley · Accepted solution]

Patrick,

You should be able to use "ip tacacs source vlan x".

Hth,
John

Sent from Cisco Technical Support iPhone App

[mahmoodmkl]

Hi

use ip tacacs source interface


Sent from Cisco Technical Support iPhone App